You need to have the public key of the party who signed the server certificate and have it installed in your system as trusted. Only a private key from the trusted party can sign a certificate so if you trust this party haven't lost its private key, you will be fine.
Bookmarks